windows 2003 server vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote malicious users to execute arbitrary code without user approval.

Microsoft Windows 2000 Microsoft Windows 2003 Server Standard Microsoft Windows 2003 Server Web Microsoft Windows Nt 4.0 Microsoft Windows Xp Microsoft Windows 2003 Server Enterprise Microsoft Windows 2003 Server Enterprise 64-bit Microsoft Windows 2003 Server R2

7.5

CVSSv2

Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote malicious users to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms.

Microsoft Windows 2000 Microsoft Windows 2003 Server Web Microsoft Windows Nt 4.0 Microsoft Windows 2003 Server R2 Microsoft Windows 2003 Server Standard Microsoft Windows Xp Microsoft Windows 2003 Server Enterprise 64-bit Microsoft Windows 2003 Server Enterprise

3 EDB exploits2 Github repositories

10

CVSSv2

Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote malicious users to execute arbitrary code via a malformed RPC request with a long filename parameter, a different vulnerability than CVE-2003-0352 (Blaster/Nac...

Microsoft Windows 2003 Server R2 Microsoft Windows Nt 4.0 Microsoft Windows 2000 Microsoft Windows 2003 Server Standard Microsoft Windows 2003 Server Web Microsoft Windows Xp Microsoft Windows 2003 Server Enterprise Microsoft Windows 2003 Server Enterprise 64-bit

10

CVSSv2

Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote malicious users to execute arbitrary code via a malformed DCERPC DCOM object activation request packet with modified length fields, a different vulnerability t...

Microsoft Windows 2000 Microsoft Windows 2003 Server Enterprise 64-bit Microsoft Windows 2003 Server R2 Microsoft Windows Nt 4.0 Microsoft Windows Xp Microsoft Windows 2003 Server Enterprise Microsoft Windows 2003 Server Standard Microsoft Windows 2003 Server Web

7.5

CVSSv2

Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote malicious users to execute arbitrary code via ASN.1 BER encodings with (1) very large...

Microsoft Windows 2000 Microsoft Windows 2003 Server Web Microsoft Windows Nt 4.0 Microsoft Windows Xp Microsoft Windows 2003 Server Enterprise 64-bit Microsoft Windows 2003 Server R2 Microsoft Windows 2003 Server Enterprise Microsoft Windows 2003 Server Standard

3 EDB exploits

5

CVSSv2

Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote malicious users to execute arbitrary code via a malformed .hlp file, which leads to a heap-based buffer overflow.

Microsoft Windows 2000 Microsoft Windows 2003 Server Enterprise Microsoft Windows 2003 Server Enterprise 64-bit Microsoft Windows 2003 Server R2 Microsoft Windows Nt 4.0 Microsoft Windows Xp Microsoft Windows 2003 Server Standard Microsoft Windows 2003 Server Web

7.6

CVSSv2

Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1, related to "An unchecked buffer" and possibly buffer overflows, allows remote malicious users to execute arbitrary code via a crafted Windows...

Microsoft Windows 2003 Server Sp1 Microsoft Windows Xp Microsoft Windows 2003 Server 64-bit Microsoft Windows 2003 Server Itanium Microsoft Windows 2003 Server R2 Microsoft Windows 2000

2 EDB exploits

5

CVSSv2

The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of memory regardless of the required size, which allows malicious users to overwrite arbitrary memory locations using an incorrect size value that...

Microsoft Windows Xp Microsoft Windows 2003 Server Itanium Microsoft Windows 2003 Server R2 Microsoft Windows 2003 Server Sp1 Microsoft Windows 2000 Microsoft Windows 2003 Server 64-bit

2 EDB exploits

7.5

CVSSv2

Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote malicious users to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corru...

Microsoft Windows 2003 Server Itanium Microsoft Windows 2003 Server R2 Microsoft Windows 2003 Server Sp1 Microsoft Windows Xp Microsoft Windows 2000 Microsoft Windows 2003 Server 64-bit

1 EDB exploit

7.8

CVSSv2

The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote malicious users to cause a denial of service (system crash) via an SMB_COM_TRANSACTION SMB message that contains a string without null character termination, which leads to a NULL der...

Microsoft Windows 2003 Server Sp1 Microsoft Windows Xp Microsoft Windows 2000 Microsoft Windows 2003 Server 64-bit Microsoft Windows 2003 Server Itanium Microsoft Windows 2003 Server R2

1 EDB exploit

Get Started

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook